nerdexam
F5

101 · Question #45

A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other…

The correct answer is C. Floating self IP address on VLAN where the packet leaves the system. When a virtual server has SNAT automap configured, it takes precedence over any standalone SNAT object, translating the source IP to the floating self IP on the egress VLAN.

Section 2: F5 Solutions and Technology

Question

A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member.

Options

  • A200.200.1.1
  • B150.150.10.11
  • CFloating self IP address on VLAN where the packet leaves the system
  • DFloating self IP address on VLAN where the packet arrives on the system

How the community answered

(49 responses)
  • A
    6% (3)
  • B
    24% (12)
  • C
    57% (28)
  • D
    12% (6)

Why each option

When a virtual server has SNAT automap configured, it takes precedence over any standalone SNAT object, translating the source IP to the floating self IP on the egress VLAN.

A200.200.1.1

The original client IP 200.200.1.1 is not preserved because SNAT automap is explicitly configured on the virtual server, which translates the source address before forwarding to the pool member.

B150.150.10.11

The standalone SNAT address 150.150.10.11 does not apply here because traffic handled by a virtual server uses that virtual server's SNAT configuration, overriding any matching standalone SNAT object.

CFloating self IP address on VLAN where the packet leaves the systemCorrect

SNAT automap on a virtual server maps the client source IP to the floating self IP on the VLAN through which the translated packet exits toward the pool member. Because the traffic matches the virtual server at 150.150.10.10:80, the virtual server's own SNAT automap setting takes precedence over the standalone SNAT object configured for the 200.200.1.0/24 range, so 150.150.10.11 is never used.

DFloating self IP address on VLAN where the packet arrives on the system

SNAT automap uses the floating self IP on the egress (outbound) VLAN where the packet leaves the system toward the server, not the ingress VLAN where the client packet arrived.

Concept tested: F5 BIG-IP SNAT automap precedence over standalone SNAT

Source: https://support.f5.com/csp/article/K7820

Topics

#SNAT automap#SNAT precedence#virtual server#floating self-IP

Community Discussion

No community discussion yet for this question.

Full 101 Practice